Overview

overview

10

Static

static

10

Synapse-X-...ED.exe

windows7-x64

10

Synapse-X-...ED.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    125s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-09-2024 17:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Synapse-X-Cracked-main/Synapse X CRACKED/Synapse X CRACKED/SynapseXCRACKED.exe

  • Size

    78KB

  • MD5

    0ddd31e824f136e691bcfd2a0b9e2670

  • SHA1

    34269cbd62e9badc52af71b2759575593a762fac

  • SHA256

    1302d9f863c25bae202e553ef078f73d8c0324deff52d8388f7525872519a5bb

  • SHA512

    786c994267fbe21e86ee829928b3d24cfa52890214700d5c2bede0232c05f13329ff605e908433c661dd4b7fc24b6a570a79c74f70e0504a43f80ff90d3d1fcb

  • SSDEEP

    1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+2PIC:5Zv5PDwbjNrmAE+yIC

Score
10/10
discordratpersistenceratrootkitstealer

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTEyOTI2NjIyNzkxOTk5MDgyNA.GInBmi.k0vV9HhM26FUzP8r3lgj8t304PciR2dvNYNKDQ

  • server_id

    1129494586109206538

Signatures

  • Discord RAT

    A RAT written in C# using Discord as a C2.

    stealerrootkitratpersistencediscordrat
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe
    "C:\Users\Admin\AppData\Local\Temp\Synapse-X-Cracked-main\Synapse X CRACKED\Synapse X CRACKED\SynapseXCRACKED.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4692
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4260,i,2727319350781907497,7925939240893079607,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:8
    1⤵
      PID:4816

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4692-0-0x00007FFDA45D3000-0x00007FFDA45D5000-memory.dmp

      Filesize

      8KB

      Download

    • memory/4692-1-0x00000216E9850000-0x00000216E9868000-memory.dmp

      Filesize

      96KB

      Download

    • memory/4692-2-0x00000216EBE90000-0x00000216EC052000-memory.dmp

      Filesize

      1.8MB

      Download

    • memory/4692-3-0x00007FFDA45D0000-0x00007FFDA5091000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/4692-4-0x00000216EC6D0000-0x00000216ECBF8000-memory.dmp

      Filesize

      5.2MB

      Download

    • memory/4692-5-0x00007FFDA45D0000-0x00007FFDA5091000-memory.dmp

      Filesize

      10.8MB

      Download